Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade firefoxUpgrade firefox-x11Upgrade thunderbirdUpgrade libvpxUpgrade libvpx-devel | Oct 10, 2023 | Sep 28, 2023 |
| Alpine Linux | — | Upgrade firefox-esrUpgrade libvpxUpgrade qt5-qtwebengine | Aug 22, 2024 | Sep 28, 2023 |
| Centos_linux | — | Upgrade thunderbirdUpgrade firefoxUpgrade firefox-debuginfoUpgrade thunderbird-debuginfo | Oct 5, 2023 | Sep 28, 2023 |
| Debian | — | Upgrade thunderbirdUpgrade firefox-esrUpgrade chromiumUpgrade libvpx | Oct 2, 2023 | Sep 28, 2023 |
| Freebsd | — | Upgrade electron22Upgrade qt6-webengineUpgrade libvpxUpgrade chromiumUpgrade electron24Upgrade ungoogled-chromiumUpgrade electron25 | Sep 29, 2023 | Sep 29, 2023 |
| Gentoo Linux | — | Upgrade www-client/google-chrome.Upgrade media-libs/libvpx.Upgrade www-client/chromium.Upgrade www-client/microsoft-edge. | Oct 5, 2023 | Sep 28, 2023 |
| Google Chrome | — | Upgrade to the latest version of Google Chrome | Sep 28, 2023 | Sep 27, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade libvpx | Mar 13, 2024 | Sep 28, 2023 |
| Mfsa2023 44 | — | Upgrade to Mozilla Firefox ESR version 115.3.1Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox version 118.0.1 | Sep 29, 2023 | Sep 28, 2023 |
| Microsoft Edge | — | Update Microsoft Edge to the latest version | Oct 2, 2023 | Sep 29, 2023 |
| Mozilla Thunderbird | — | Upgrade to the latest version of Mozilla ThunderbirdUpgrade to Mozilla Thunderbird version 115.3.1 | Oct 2, 2023 | Sep 28, 2023 |
| Oracle_linux | — | Upgrade libvpxUpgrade thunderbirdUpgrade firefox-x11Upgrade libvpx-develUpgrade firefox | Oct 5, 2023 | Sep 27, 2023 |
| Redhat_linux | — | Upgrade thunderbirdUpgrade firefoxUpgrade libvpx-debuginfoUpgrade libvpxUpgrade thunderbird-debuginfoUpgrade firefox-debugsourceUpgrade thunderbird-debugsourceUpgrade libvpx-debugsourceUpgrade firefox-x11No solution existsUpgrade libvpx-utils-debuginfoUpgrade libvpx-develUpgrade firefox-debuginfo | Oct 5, 2023 | Sep 28, 2023 |
| Rocky_linux | — | Upgrade libvpxUpgrade libvpx-debugsourceUpgrade libvpx-develUpgrade libvpx-debuginfo | Aug 15, 2024 | Sep 28, 2023 |
| Suse | — | Upgrade MozillaFirefoxUpgrade vlc-noxUpgrade vlc-langUpgrade MozillaFirefox-translations-commonUpgrade mozillafirefox-branding-upstreamUpgrade libvpx1Upgrade libvpx7Upgrade vlc-qtUpgrade libvlccore9Upgrade libvpx-develUpgrade libvpx4-32bitUpgrade vlc-vdpauUpgrade libvpx4Upgrade MozillaThunderbirdUpgrade MozillaFirefox-develUpgrade vlc-opencvUpgrade operaUpgrade MozillaThunderbird-translations-commonUpgrade vlc-jackUpgrade vlc-codec-gstreamerUpgrade vlcUpgrade chromedriverUpgrade chromiumUpgrade MozillaFirefox-translations-otherUpgrade libvpx1-32bitUpgrade libvpx7-32bitUpgrade libvlc5Upgrade MozillaThunderbird-translations-otherUpgrade vpx-toolsUpgrade vlc-devel | Oct 2, 2023 | Sep 28, 2023 |
| Ubuntu | — | Upgrade libvpx3 (Ubuntu Pro)Upgrade firefoxUpgrade thunderbirdUpgrade libvpx6Upgrade libvpx5 (Ubuntu Pro)Upgrade libvpx7Upgrade libvpx1 (Ubuntu Pro) | Oct 3, 2023 | Sep 28, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 28, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub